[TASK] Add release notes and pump to 3.27.0

[FIX] call done() in tests, skip.

[TASK] use new express.Router() not new express.Router.

[TASK] Initialize cors at require as a const.